CRITICAL
Flipper Code – WordPress Development Company
CVE published 2026-06-15
CVE-2026-39492
A critical unauthenticated SQL injection vulnerability exists in WP Maps plugin versions up to 4.9.1. This vulnerability, tracked as CVE-2026-39492, has a CVSS score of 9.3 and is considered critical. The vulnerability allows attackers to inject malicious SQL code, potentially leading to data breaches or system compromise.